Your message dated Sun, 02 Feb 2020 12:34:38 +0000
with message-id <[email protected]>
and subject line Bug#946659: fixed in kopanocore 8.7.0-6
has caused the Debian Bug report #946659,
regarding kopanocore: apparmor profile fails on Ubuntu because of
/usr/sbin/ldconfig.real
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
946659: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=946659
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: kopanocore
Version: 8.7.0-5
Severity: normal
Tags: patch
User: [email protected]
Usertags: origin-ubuntu focal ubuntu-patch
Dear maintainers,
Since 8.7.0-3, the autopkgtests for kopanocore have been failing in Ubuntu,
due to an apparmor denial when kopano-search tries to access /usr/sbin/ldconfig:
[413685.899592] audit: type=1400 audit(1576179514.224:92): apparmor="DENIED"
operation="open" profile="/usr/sbin/kopano-search" name="/usr/sbin/ldconfig"
pid=298626 comm="ldconfig" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
The reason for this is that ldconfig on Ubuntu is a wrapper script around
ldconfig.real.
The attached patch fixes the autopkgtest failure (and the subsequent runtime
failures) on Ubuntu. Please consider applying this in Debian.
Thanks,
--
Steve Langasek Give me a lever long enough and a Free OS
Debian Developer to set it on, and I can move the world.
Ubuntu Developer https://www.debian.org/
[email protected] [email protected]
diff -Nru kopanocore-8.7.0/debian/apparmor/usr.sbin.kopano-search
kopanocore-8.7.0/debian/apparmor/usr.sbin.kopano-search
--- kopanocore-8.7.0/debian/apparmor/usr.sbin.kopano-search 2019-10-29
10:43:03.000000000 -0700
+++ kopanocore-8.7.0/debian/apparmor/usr.sbin.kopano-search 2019-12-12
14:06:36.000000000 -0800
@@ -41,7 +41,7 @@
/lib/@{multiarch}/ld-*.so mr,
- /{,usr/}sbin/ldconfig Pix,
+ /{,usr/}sbin/ldconfig{,.real} Pixr,
/run/kopano/search.pid rw,
/run/kopano/search.pid.lock lrw,
--- End Message ---
--- Begin Message ---
Source: kopanocore
Source-Version: 8.7.0-6
We believe that the bug you reported is fixed in the latest version of
kopanocore, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Carsten Schoenert <[email protected]> (supplier of updated kopanocore
package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 02 Feb 2020 13:09:00 +0100
Source: kopanocore
Architecture: source
Version: 8.7.0-6
Distribution: unstable
Urgency: medium
Maintainer: Giraffe Maintainers
<[email protected]>
Changed-By: Carsten Schoenert <[email protected]>
Closes: 936808 946659
Changes:
kopanocore (8.7.0-6) unstable; urgency=medium
.
[ Steve Langasek ]
* [0f7f9e8] apparmor kopano-server: allow ldconfig{,.real} call
(Closes: #946659)
.
[ Carsten Schoenert ]
* [a351358] rebuild patch queue from patch-queue branch
Added patch (cherry-picked from upstream):
freebusy-avoid-out-of-bounds-access-in-HrAddFBBlock.patch
Fixes CVE-2019-19907
Updated patch:
Use-python3-everywhere.patch
We need to adjust the shebang within more Python files so debhelper isn't
adding a dependency on Python2 because '/usr/bin/python' was found.
(Closes: #936808)
* [5e65048] mv service file to current dh name schema
As recent debhelper isn't detecting a service file
$binary-package.$binary-package.service any more we need to adjust these
sequencer files a bit. A simple renaming is enough so the service files
for kopano-{dagent,presence,server} are also shipped within their
packages.
* [1aa9c45] kopano-server.service: picking up upstream things
The upstream service file is using some things we can also apply to our
service file like the Description and the additional man pages.
* [8351c36] kopano-dagent.service: pick Description from upstream
Picking up the more explaining Description from the upstream service file.
* [2c8b0ba] d/control: increase Standards-Version to 4.5.0
No further changes needed.
* [cf9a393] kopano-libs.symbols: update symbols to 8.7.0(-6)
Checksums-Sha1:
e9b95630b8f49e35942dfeca3bbcbba0ce702c37 3863 kopanocore_8.7.0-6.dsc
17cbffb9ca2930d7d36223917baa66dab31d0e19 64596 kopanocore_8.7.0-6.debian.tar.xz
da431004ef95467c771800b6ae9ac1007a9f7a96 18680
kopanocore_8.7.0-6_amd64.buildinfo
Checksums-Sha256:
3f0abd6d1d201b6b8dd6cb0bdee3d54497be48b9a73be05a6d5d69cb92e830ca 3863
kopanocore_8.7.0-6.dsc
606168fbdb86110152210be4d247b106adad4ca000c182880a9505ae13b06faa 64596
kopanocore_8.7.0-6.debian.tar.xz
8bd9f7d1c010bd544accf7b3e4b8e16c0759fe449b9b084aa19ee18e4281b1f3 18680
kopanocore_8.7.0-6_amd64.buildinfo
Files:
a333cd32dd87ecefa397f695a3702fc7 3863 mail optional kopanocore_8.7.0-6.dsc
a081e5fd331e645108d7d038b0001183 64596 mail optional
kopanocore_8.7.0-6.debian.tar.xz
80ef4926136b831ef95976597ebb6752 18680 mail optional
kopanocore_8.7.0-6_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=w0YF
-----END PGP SIGNATURE-----
--- End Message ---
